On 22/09/2015 00:27, Richard Barnes wrote:
On Mon, Sep 21, 2015 at 6:58 PM, Jonathan Watt <jw...@jwatt.org> wrote:
I don't think directory picking is bad - there are many sites with
legitimate uses. I think it's right that we need to think about the
security implications though, and members of the security team have been
looped in to consider these issues.
Who have you been talking to on the security team? I haven't heard any
discussion of this in our security engineering meetings. And I share EKR's
concerns here.
Yourself, dveditz and Jesse have all commented in the bug.
https://bugzilla.mozilla.org/show_bug.cgi?id=907707
When I said "looped in to consider these issues" that's what I meant.
_______________________________________________
dev-platform mailing list
dev-platform@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-platform
